Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

CycloneDX is an efficient standard for Software Bill of Materials (SBOM) that is specifically crafted for application security and the analysis of supply chain components. The governance and ongoing development of this specification are overseen by the CycloneDX Core working group, which has its roots in the OWASP community. A thorough and precise catalog of both first-party and third-party components is crucial for identifying potential risks. Ideally, BOMs should encompass all direct and transitive components, as well as the interdependencies that exist among them. By implementing CycloneDX, organizations can swiftly fulfill essential requirements and progressively evolve to incorporate more advanced applications in the future. Furthermore, CycloneDX meets all SBOM criteria set forth in the OWASP Software Component Verification Standard (SCVS), ensuring comprehensive compliance and security management. This capability makes it an invaluable tool for organizations aiming to enhance their software supply chain integrity.

Description

DevSecOps Next Generation - Securing Your Binaries. Identify security flaws and license violations early in development and block builds that have security issues before deployment. Automated and continuous auditing and governance of software artifacts throughout the software development cycle, from code to production. Additional functionalities include: - Deep recursive scanning components, drilling down to analyze all artifacts/dependencies and creating a graph showing the relationships between software components. - On-Prem or Cloud, Hybrid, Multi-Cloud Solution - An impact analysis of how one issue in a component affects all dependent parts with a display chain displaying the impacts in a component dependency diagram. - JFrog's vulnerability database is continuously updated with new component vulnerabilities data. VulnDB is the industry's most comprehensive security database.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

ArmorCode Yes 
Mend.io Yes 
Anchore Yes 
Arnica Yes 
Bytesafe Yes 
Checkmarx Yes 
Debricked Yes 
DefectDojo Yes 
Endor Labs Yes 
JFrog Yes 
JFrog Connect No 
JSON Yes 
MergeBase Yes 
ServiceNow Yes 
Testlemon No 
Tromzo No 
Vulcan Cyber No 
XML Yes 
Xygeni Yes 

Integrations

ArmorCode Yes 
Mend.io Yes 
Anchore No 
Arnica No 
Bytesafe No 
Checkmarx No 
Debricked No 
DefectDojo No 
Endor Labs No 
JFrog No 
JFrog Connect Yes 
JSON No 
MergeBase No 
ServiceNow No 
Testlemon Yes 
Tromzo Yes 
Vulcan Cyber Yes 
XML No 
Xygeni No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person Yes 

Vendor Details

Company Name

CycloneDX

Website

cyclonedx.org

Vendor Details

Company Name

JFrog

Founded

2008

Country

United States

Website

jfrog.com/xray/

Product Features

Continuous Integration

Build Log No 
Change Management No 
Configuration Management No 
Continuous Delivery Yes 
Continuous Deployment Yes 
Debugging Yes 
Permission Management Yes 
Quality Assurance Management Yes 
Testing Management No 

DevOps

Approval Workflow Yes 
Dashboard No 
KPIs No 
Policy Management Yes 
Portfolio Management No 
Prioritization No 
Release Management No 
Timeline Management No 
Troubleshooting Reports Yes 

IT Security

Anti Spam No 
Anti Virus No 
Email Attachment Protection No 
Event Tracking No 
IP Protection No 
Internet Usage Monitoring No 
Intrusion Detection System No 
Spyware Removal No 
Two-Factor Authentication No 
Vulnerability Scanning Yes 
Web Threat Management Yes 
Web Traffic Reporting No 

Vulnerability Management

Asset Discovery Yes 
Asset Tagging Yes 
Network Scanning Yes 
Patch Management Yes 
Policy Management Yes 
Prioritization Yes 
Risk Management Yes 
Vulnerability Assessment Yes 
Web Scanning Yes 

Alternatives

Alternatives

aqua cloud Reviews

aqua cloud

aqua cloud GmbH
CodeSentry Reviews

CodeSentry

CodeSecure